Microsoft Authenticator
Named by 3 kept items in this workspace.
2 items name it under affected products and 1 under tools.
Search every workspace for Microsoft Authenticator. It matches the name as written, so it can find other things that share it.
The items that name it 3
Authenticator app abused via actor-registered software token / PhoneAppOTP for MFA persistence.
All technologies in this workspace.